It doesn’t look like an actual disclosure, in that he isn’t explaining how the exploit works, just sharing that it exists.